CVE-2024-22426
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RecoverPoint for VMs
- Vendor
- Dell
- Product
- RecoverPoint for VMs
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.3 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 5.3 SP2 P1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 5.3 SP2 P2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 5.3 SP2 P4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 5.3 SP3 P1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 5.3 SP3 P2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0.SP1 | affected | Unavailable | Unavailable | Unavailable | None listed |